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O , Abstract 

We show that quantum query complexity satisfies a strong direct product theorem. This 
^ I means that computing k copies of a function with less than k times the quantum queries needed 

to compute one copy of the function implies that the overall success probability will be expo- 
OO I nentially small in k. For a boolean function / we also show an XOR lemma — computing the 

parity of k copies of / with less than k times the queries needed for one copy implies that the 
I advantage over random guessing will be exponentially small. 

Qh' We do this by showing that the multiplicative adversary method, which inherently satisfies 

a strong direct product theorem, is always at least as large as the additive adversary method, 
C . which is known to characterize quantum query complexity. 

I — \- 1 Introduction 

' We show that quantum query complexity satisfies a strong direct product theorem. A strong 

00 ■ direct product theorem states that to compute k copies of a function with less than k times the 

resources needed to compute one copy of the function implies that the success probability will be 
exponentially small in k. For boolean functions, we further show an XOR lemma. XOR lemmas are 
closely related to strong direct product theorems and state that computing the parity of k copies 



, of a boolean function with less than k times the resources needed to compute one copy implies 

that the advantage over random guessing will be exponentially small. XOR lemmas can be shown 
quite generally to imply strong direct product theorems and even threshold direct product theorems 
[Ung09] , which state that one cannot compute a /i fraction of the k copies with less than fik times 
^ I the resources with better than exponentially small (in fik) success probability. Thus in the boolean 

case we are also able to obtain a threshold direct product theorem. 

How the resources needed to compute k copies of a function scale with those needed for one 
copy is a very natural question that has been asked of many computational models. While direct 
product theorems are intuitively highly plausible, they do not hold in all models [Sha03], and there 
are relatively few models where strong direct product theorems are known. Notable examples of 
direct product-type results include Yao's XOR lemma and Raz's parallel repetition theorem [Raz98]. 
Closer to our setting, strong direct product theorems have been shown for one-way randomized 
communication complexity [JailO] and for randomized query complexity [Drull]. 

In quantum query complexity strong direct product theorems were previously known for some 
special classes of functions and bounds shown by particular methods. In the first such result, Klauck, 
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Spalek and de Wolf [KSdW07] used the polynomial method [BBC+OS] to show a strong direct 
product theorem for the quantum query complexity of the OR function. Via block sensitivity, this 
gives a polynomially tight strong direct product theorem for all functions — namely, any algorithm 
using less than a constant fraction times kQ{f)^^^ will have exponentially small success probability 
for computing k copies of /. 

Sherstov [Shell] recently showed how certain lower bound techniques based on looking at the 
distance of the function to a convex set inherently satisfy a strong direct product theorem. As 
an application he was able to show that the polynomial method satisfies a strong direct product 
theorem in general. Thus one obtains a strong direct product theorem for the quantum query 
complexity of any function where the polynomial method shows a tight lower bound. Super-linear 
gaps between the polynomial degree and quantum query complexity are known [Amb06], however, 
so this does not give a tight strong direct product theorem for all functions. 

Direct product results have also been shown by the other main lower bound technique in quan- 
tum query complexity, the adversary method. The adversary method defines a potential function 
based on the state of the algorithm after t queries, and bounds the change in this potential func- 
tion from one query to the next. By developing a new kind of adversary method, Ambainis, 
Spalek, and de Wolf [ASdWOG] showed a strong direct product theorem for all symmetric func- 
tions. Spalek [Spa08] formalized this technique into a generic method, coining it the multiplicative 
adversary method, and showed that this method inherently satisfies a strong direct product theo- 
rem. The name multiplicative adversary contrasts with the additive adversary method, introduced 
earlier by Ambainis [Amb02] and later extended by H0yer, Lee and Spalek [HLS07]. The additive 
adversary method bounds the difference of the potential function from one step to the next, while 
the multiplicative adversary method bounds the corresponding ratio. 

There have recently been great strides in our understanding of the adversary methods. A series 
of works [FGG08, CCJY09, ACR+10, RS08, Rei09, ReilO, LMRSIO] has culminated in showing 
that the additive adversary method characterizes the bounded-error quantum query complexity of 
any function whatsoever. Ambainis et al. [AMRRll], answering an open question of Spalek [SpaOS], 
showed that the multiplicative adversary is at least as large as the additive. Thus the multiplicative 
adversary bound also characterizes bounded-error quantum query complexity. 

This seems like it would close the question of a strong direct product theorem for quantum 
query complexity. The catch is the following. The multiplicative adversary method can be viewed 
as a family of methods parameterized by the bound c on the ratio of the potential function from one 
step to the next. The strong direct product theorem of [Spa08] holds for any value of c sufficiently 
bounded away from 1. The result of [AMRRll], however, was shown in the limit c — )• 1, which 
ends up degrading the resulting direct product theorem into a direct sum theorem. We show that 
the multiplicative adversary is at least as large as the additive adversary for a value of c bounded 
away from 1. A similar result was independently observed by Belovs [Belli]. Together with the 
strong direct product theorem for the multiplicative adversary by [SpaOS] this suffices to give a 
strong direct product theorem for quantum query complexity. Rather than use this "out of the 
box" strong direct product theorem, however, we prove the strong direct product theorem from 
scratch using a stronger output condition than those used previously [SpaOS, AMRRll]. This 
results in better parameters, and a better understanding of the multiplicative adversary method. 

Theorem 1.1 (Strong direct product theorem). Let f : T> ^ E where T> C Z?" for finite sets D,E. 
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For an integer k > define f^^\x^, . . . ,x^) = {f{x^), . . . ,f{x^)). Then, for any (2/3) < 6 <1, 

gi_5fc/2(/^ ') > — Qi/dJ) ■ 

In the boolean case, we prove the following XOR lemma which also implies a threshold direct 
product theorem (Theorem 5.5). 

Lemma 1.2 (XOR Lemma). Let f : D ^ {0, 1} where T> C for finite set D. For an integer 
k > and any < d < 1, 

kf) 

Q(i_5^/.)/2(eo/('=))>^.gi/4(/) . 

1.1 Proof technique 

While the statement of om' main theorems concern functions, a key to our proofs, especially for 
the XOR lemma, is to consider more general state generation problems, introduced in [AMRRll]. 
Instead of producing a classical value f{x) on input x, the goal in state generation is to produce a 
specified target state \ax), again by making queries to the input x. We will refer to a{x, y) = {(Tx\(yy) 
as the target Gram matrix. Evaluating a function / can be viewed as a special case of state 
generation where the target Gram matrix is F{x,y) = Sf{x),f{y)- 

Our most general result (Theorem 4.1) shows that for a restricted class of target Gram matrices 
a, to generate cr®'^ with better than exponentially small success probability requires at least a 
constant fraction of k times the complexity of a. The strong direct product theorem is obtained 
as a special case of this theorem by considering the Gram matrix F(x,y) = Sf{x)j{y)- To obtain 
the XOR lemma, we apply this theorem with the state generation problem of computing / in the 
phase, that is to generate af{x,y) = (— 1)/(^)+/(2'). The advantage of considering this state is that 
cjj is the state generation problem corresponding to computing the parity of k copies of / in the 
phase. We then show that the complexities of / and the state generation problem of computing / 
in the phase are closely related. 

Another key element of our proofs is a new characterization of the set of valid output Gram ma- 
trices for an algorithm solving a state generation problem with success probability 1 — e (Claim 3.8). 
We call a condition which defines a set containing this set of valid output matrices an output con- 
dition. Usually a lower bound uses an output condition which is a relaxation of the true output 
condition, and shows a lower bound against all Gram matrices satisfying this output condition, and 
thereby all valid output matrices as well. Examples of output conditions previously used with the 
adversary bound include being close to the target Gram matrix in distance measured by the /qo or 
72 norms. These conditions, however, do not work for small success probabilities, which is critical 
to obtain the strong direct product theorem. 

We give a new characterization of the true output condition in terms of fidelity. Since the fidelity 
between two quantum states is bounded by the fidelity between the probability distributions arising 
from any measurement on those states, a relaxation of this output condition may be obtained by 
considering the measurement corresponding to an optimal witness for the adversary bound of the 
problem. A lower bound on the multiplicative bound under this relaxed output condition can be 
written as a linear program. By taking the dual of this linear program we are able to lower bound 
the value on a^^ in terms of the bound for a by using a completely classical claim about product 
probability distributions (Corollary 3.13). This approach allows us to obtain a cleaner statement 
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for the strong direct product theorem than what we would obtain from the output condition used 
in [Spa08, AMRRll], and also clarifies the inner workings of the adversary method, which might 
be of independent interest. 

2 Preliminaries 

Let ?R.{z) denote the real part of a complex number z. Let 5a,b denote the Kronecker delta function. 
We will refer throughout to a function f : T> ^ E where P C for finite sets D, E. We let 
j(fc) . pfc _^ j^k function computing k independent copies of /, namely /^^^(x^, . . . ,x^) = 

{f{x^), . . . , f{x^)). We let © o /C^) denote the parity function composed with f^^\ We also define 
some auxiliary matrices associated with /. Let F{x,y) = ^f(x),f{y)i ^"^^ ^i{x-,y) = ^x^,yi for 
x,y € V and i S [n]. For boolean functions, i.e., when \E\ = 2, we also define the matrix 
af{x,y) = (— for x,y ^V. Note that = 2F — J, where J is the all-1 matrix. We use 
Ao B for the entrywise product between two matrices A, B, also known as the Schur or Hadamard 



Let p,a be two |P| x positive semidefinite matrices such that Trp = Tra = 1 (i.e., quantum 
states on a |P|-dim Hilbert space) and p,q be two probability distributions over D. We will use 
the notion of fidelity, for both quantum states and classical probability distributions. 

Definition 2.1 (Fidelity). 



For < A < 1 and < /i < 1, we denote by D(A||/i) the binary relative entropy of A and p, 
defined as follows. 

Definition 2.2 (Binary relative entropy). 



product. 





D{X\\fi) = Aln- + (1-A)ln 



1-A 



where OlnO = 0. 



Finally, for a \T>\ x \D\ matrix A we will also use the factorization norm 72(7!). 



Definition 2.3 (Factorization norm). 




\ux},\vx}eC'' 



\u),\v) 

lll«>ll=llk>ll=l 



max \\A o \u) {v\ ||tr 



We will make use of the following basic claims. 



Claim 2.4. For any matrices A, B where Ao B is defined, 



1. \\AoB\\ < 72(^) • \\B 



2. {AhO and BhO} ^ AoB^O 
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2.1 Quantum query complexity and state generation 

The quantum query complexity of /, denoted Qe{f) is the minimum number of input queries needed 
to compute / with error at most e. We refer to the survey [BdW02] for definitions and background 
on this model. 

Although our main interest will be in the query complexity of functions, it will be useful to also 
talk about state generation problems, introduced in [AMRRll]. Instead of producing a classical 
value f{x) on input x, the goal in state generation is to produce a specified target state \ax), again 
by making queries to the input x. As unitary transformations independent of the input can be 
made for free in the query model, a state generation problem is wholly determined by the Gram 
matrix a{x,y) = (<T^.|o-y) of the target states {\crx)}xev- We refer to a as the target Gram matrix. 

State generation problems come in two variations, coherent and non-coherent. An algorithm V 
solves the coherent quantum state generation problem a with error at most e if, for every x € D, 
it generates a state \V{x)) e H (EiTi' such that ^{{V{x)\{\ax) |0))) > \/l — e, where H' denotes 
the workspace of the algorithm, and |0) is a default state for T-L' . The coherent quantum query 
complexity of a, denoted Q'^{cr) is the minimum number of queries needed to generate a coherently 
with error at most e. 

An algorithm V solves the non-coherent state generation problem a with error at most e if there 
exists a set of states G H' such that ^{{V{x)\{\ax) ^ \4'x))) > \/l — e for all x G P. We denote 
by Qeic) the non-coherent query complexity of generating a with error e. 

Evaluating a function / can be seen as a special case of non-coherent state generation where 
the target Gram matrix is F{x,y) = 5f{x)j{y)- In other words, Qeif) = Qe{F) where F{x,y) = 
Sf(x),f{y) ! justifying our abuse of notation. For state generation problems corresponding to functions 
the coherent and non-coherent complexities are closely related. 

Claim 2.5. Let f be a function. Then 

Qe{F) < Q%F) < 2Q,_^^{F) . 

Proof. The lower bound holds for a general target Gram matrix a, as the success condition in the 
coherent case implies the non-coherent one. 

For the upper bound, let Ax be an algorithm computing f{x) with success probability 1 — r/. 
Thus the algorithm applied on |0)|0), where the first register is the output register and the second 
register corresponds to some workspace initialized in a default state, prepares a state 

Axiom = Y,(^j\j+fi^)M)^ 

where by assumption |ao| > y/l — f], and the states \ipj) describe the final state of the workspace 
register. Let us now copy the output register into an additional register initialized in the state 
|0) using an addition gate G, and finally uncompute the original output register together with the 
workspace by using the algorithm Ax in reverse. 

We analyze the overlap of A-^GAx\0)\0)\0) with |0)|0)|/(x)). After applying G on A^|0)|0)|0), 
we have the state \v) = aj\j + f{x))\tpj)\j + f{x)). Now we look at the overlap of |0)|0)|/(x)) 
with A~^\v) or, equivalently, the overlap oi Ax\0)\0)\f{x)) with \v). Since 

^,|0)|0)|/(x)) = j;a,|j + /(x))|^,)|/(x)), 
j 



5 



we have 

(0|(0|(/(x)|A-» = ^ \ajf{f{x)\j + fix)) > 1 - r?. 
j 

Therefore, this algorithm coherently computes f{x) with success probability 1 — e > (1 — rj)^. 
Inverting this relation, we obtain rj > 1 — \/l — e. □ 

We will also consider another type of state generation problem associated with a function, that 
of computing the function in the phase. For a boolean function / : P — >■ {0, 1} let af{x,y) = 
While the non-coherent complexity of af is trivial, the coherent complexity of af is 
closely related to that of F. 

Claim 2.6. 

Q(l_yT3i)/2+e/4(^) < Qei<^f) < 2Q(l-VT=i)/2(^) 

Proof. For the lower bound, we turn an algorithm for crj into an algorithm for F = (J + c/)/2 by 
using the SWAP test. The error dependence then follows from the joint concavity of the fidelity: 

T ^^^j^ o uu* , '^'^2^ o uu*^ — 2 ~'~ 2"^ ° uu*, af o uu*) . 

for any u. 

For the upper bound, let us consider an algorithm computing f{x) (in a register) with 
success probability 1 — rj. Thus, the algorithm applied on |0)|0), where the first register is the 
output register and the second register corresponds to some workspace initialized in a default state, 
prepares a state 

^0.10)10)= ^ aj\j®f{x))\i,j), 
j=o,i 

where by assumption |ao| > ~ the states \^j) describe the final state of the workspace 

register. Let $ be a phase gate acting on the output register as \h) i->- (— 1)-^(^) We can turn an 

algorithm Ax computing in a register into an algorithm computing in the phase by first applying 
Ax to compute the output, then applying the phase gate $, and finally applying A~^ to uncompute 
the output. 

After applying $ on ^a;|0)|0), we have the state $A^|0)|0) = Ej=o,i(-l)-'^-^^^^«:?b' ® f{x))\'^3)- 
Now we look at the overlap of (— 1)-'^(^)|0)|0) with Aj-'^$^j;|0)|0) or, equivalently, the overlap of 
(_1)/W^^|0)|0) with ^Ax\<d)\^). We have 

(-1/W(0|(0|^;i$^,|0)|0) =X;(-iy|a,f > l-2r?. 

3 

Therefore we obtain a success probability 1 — e > (1 — 277)^. Inverting this relation, we obtain 
r]>{l-^/l^e)/2. □ 
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3 Adversary methods 



In this section we introduce both the additive and multiphcative adversary lower bound methods. 
Even when one is only interested in the functional case, it is useful to view these methods as lower 
bounds on quantum state generation as this allows the separation of the method into two distinct 
parts. The first part is a lower bound on exact coherent quantum state generation. This is where 
the two methods differ. The second part is the output condition, a minimization of the bound for 
exact coherent quantum state generation over all valid output Gram matrices. The set of valid 
output Gram matrices is determined by the target Gram matrix a, the error parameter e, and if 
one is considering coherent or non-coherent state generation. This second step is common to both 
the additive and multiplicative methods. Finally, we show that the multiplicative bound is at least 
as large as the additive bound. 

3.1 Additive method 

We first review the derivation of the additive adversary method to compare it with the multiplicative 
method in the next section. We will actually present a generalization of the additive adversary 
method due to [LMR+11]. 

Consider an algorithm that exactly coherently computes a by making T queries. Let 1-0*) be 
the state of this algorithm on input x after t queries, and p^{x,y) = {ipHipy) be the corresponding 
Gram matrix. Note that = J the all ones matrix and, by assumption, p'^ = a. 

Now let r be a matrix, v a vector, and consider the potential function <I>(t) = Tr((r o p^)vv*). 
The additive change in this potential function from the beginning to the end of the protocol is 

T-l 

Tr((r o (J - a))vv*) = ^ Tr((r o (p* - p'+^))vv*) 

t=o 

< rmaxTr((r o (p* - p^+^))vv*) . 

A standard argument (see, for example, [HLS07]) then goes that if we impose the condition on T 
that 

/ ± r o (J - Aj) ^ for aU i e [n], 

then Tr((r o (p* - p^+'^))vv*) < 2, for all t and v. 

As this argument holds for any T and v, we can maximize over them leading to the following 
definition. 

Definition 3.1 (Additive adversary method [LMR'''ll]). 

Adv*(a) =maximize ||r o ( J — a)\\ 

subject to / lb r o ( J — Aj) ^ for all i £ [n], 
where the maximization is over \D\ x hermitian matrices T. 

The preceding argument shows the following. 
Theorem 3.2 ([LMR+11]). For any target Gram matrix a, 

r,c(. ^ Adv*(cT) 

Qq[cf) > 
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[LMR^ll] have also shown that this lower bound is tight for the bounded-error query complexity 
of functions. 

Theorem 3.3 ([LMR+11]). For any function f, 

Qi/df) < 1000- Adv*(F) 

Up to the constant factor, this upper bound holds more generally for well-behaved state genera- 
tion problems, where the query complexity Qt{<y) does not depend dramatically on the error e (i.e., 
Q,{a) = Q{Q,,{a)) for small e,e'). 

Remark 3.4. The adversary hound Adv^ from [HLS07] was originally defined in the functional 
case, that is, for target Gram matrices F of the form F(x,y) = ^f{x)j(y) for a function F. This 
definition had an additional constraint that T o F = {). This constraint only affects the bound up to 
a multiplicative factor of two [LMR^ 11]. 

Adv^(F) < Adv*(F) < 2Adv^(F) . (3.1) 

The constraint F o F = allows one to show that Adv=^ (F) /2 is a lower bound even on the non- 
coherent complexity of generating F. One can see that Adv*(i^)/4 is a lower bound on the non- 
coherent complexity of generating F either by Eq. (3.1) or by Claim 2.5 showing that the coherent 
and non-coherent state generation complexities of functions are related by a factor of two. 



3.2 Multiplicative adversary method 

The multiplicative bound is derived by considering the same potential function <l*(t), but looks 
at the ratio of this function at the beginning and end of the protocol, rather than the difference. 
Equivalently, one can consider the logarithmic potential function ln($(i)) and again look at the 
additive change over the course of the protocol. As the argument to the logarithm should be 
positive, we already see that a new constraint on F is needed, namely F ^ 0. 

Definition 3.5 (Multiplicative adversary method). 

Madv((T) = maximize - — maximize In (Tr((F o (T)fu*)) 
c ln(c) T>~Q,v 

subject to Ti:{Tvv*) = 1 

c^^F ^ F o Aj ^ c F for alH e [n], 

where the maximization is over \T)\ x |D| positive definite matrices F and unit vectors v. 

Theorem 3.6 ([Spa08, AMRRll]). For any state generation problem a, 

Madv(a) 
Qo{(y) > • 

Proof. Consider an algorithm that coherently generates cr by making T queries, and define a po- 
tential function <I>(t) = Tr((F o p^)vv*), where F ;^ 0. Then 

$(r) _ Tr((Fo(j)OT*) _ Tr((Fop*+i)OT*) 



$(0) Tt:{{ToJ)vv*) Tt{{Topt)vv 

Tr((Fop*+l)^;^;*^^^ 
< max ^ ' 



t Tr((F o p*)vv* 
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Analogously to the additive bound, we now show that the constraint c ^ ToAj ^ c F for all i E 
[n] implies 

inax — — — , . — r — _^ c . 

t Tr((r o p^)vv*) 

This argument is very similar to proofs in [Spa08, AMRRll] so we only sketch the idea here. Recall 
from [AMRRll] that we can assume that there are only two types of queries, called computing and 
uncomputing queries (this restriction can only increase the query complexity by a factor at most 
2, hence the factor 1/2 in the final lower bound). Let us first consider a computing query. Let 
IV'xi) ~ where Pi is a projector onto the query register containing index i, and p\{x,y) = 

{'4'x ilV'y «)• We can decompose the state before the t-th query as p* = J2i p\i ^'^^ t^i^ state after the 
query as = ^ ■ o Aj. The condition L o Aj ^ c F then immediately implies that 

Tr((r o < c Tr((r o p^)vv*). 

For uncomputing queries, the roles of /)* and p*"^^ are interchanged, and we obtain the same con- 
clusion from the constraint F ^ c F o Aj. □ 

Remark 3.7. The constraints on F given here are expressed differently from [Spa08, AMRRll], 
the latter using the constraint ||FV2(r o Aj)-i/2|| < c and ||(F o Aj)V2r-V2|| < c. It is straight- 
forward to show, however, that these conditions are equivalent to c~^F ^ F o Aj ^ c F. 

When the value of c is fixed, the multiplicative bound becomes a semidefinite program. Indeed, 
setting W = T o vv* , we have: 

Madv(cr) = maximize — maximize ln(Ti(Wa)) 
c ln(c) W)~o 

subject to Tr(H^J) = 1 

c-^W <WoAi^cW (or al\i£ [n]. 

Thus we can view the multiplicative adversary bound as a maximization over semidefinite programs. 



3.3 Output condition 

Thus far, we have seen lower bounds on the problem of exact coherent state generation. To obtain a 
lower bound in the bounded-error setting — coherent or non-coherent — one can minimize the exact 
coherent bound over the set of valid final Gram matrices of a successful algorithm. 

We will restrict our discussion to the coherent output condition. As our main results are for 
functions, by showing lower bounds on the coherent state generation problems F and cr/ associated 
with a function /, we obtain lower bounds on the query complexity of / by Claim 2.5 and Claim 2.6. 

Recall that a successful coherent e-error algorithm V for the set of target vectors {ctx} must 
satisfy ^{{V{x)\{\ax) (E> |0))) > \/l — e. We can equivalently rephrase this as ^{{V{x)\V{\ax) (S> 
|0))) > \/l — e for some unitary V. This can be done as the unitary V can be appended to the 
algorithm at no extra cost, and this formulation has the advantage that it only depends on the 
Gram matrix cr of the vectors {cJx} and the Gram matrix a'{x,y) = {V{x)\V{y)), rather than the 
vectors themselves. 

The set of a' satisfying this condition can be hard to deal with, so previous works have typically 
relaxed this condition and used an output condition that defines a larger, simpler set. For example. 
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the original Ambainis output condition minimized over a' satisfying iooif^ — c') ^ 2y^ for error 
parameter e. A stronger output condition based on the 72 norm that 72 (cr — a') < was 
introduced in [HLS07]. As 72(f) > ^ooiv), this output condition defines a smaller set. The 72 
output condition was later shown to be approximately tight in the sense that if 72(0" — a') < e, then 
there is a unitary V such that (o"a.|y|(T^.) > 1 — 2y/e for all x [LMR+11]. While approximately tight 
in the bounded-error setting, this condition is not strong enough for proving strong direct product 
theorems, where we need to obtain non-trivial bounds for exponentially small success probabilities. 

Here we work with the full output condition and express it in an alternative form that is easier to 
handle. As a side effect, our new characterization provides an alternative proof that the 72 output 
condition is tight in the bounded-error setting, and improves the parameters given in [LMR'^ll]. 

Claim 3.8. Let {la^)}, {1^^)} be two sets of vectors, and p,a their corresponding Gram matrices. 

niaxnim?R.({ax\V\bx)) = min T(pouu*,aouu*) , (3.2) 

V X m;||m1| = 1 

where the maximization is taken over all unitaries V . 

Proof. By writing the left hand side as a semidefinite program and taking the dual one can show 
that 

maxmin5R((oa;|y|62;)) = min max5?(Tr(y> |ttxP|aa;)(&a;|)) • 

V X u:\\u\\ = l V 

X 

Letting D{u) be a diagonal matrix with entries given by n, we can rewrite the right hand side 
of this last expression as 

maxminK((a:,;|y|6^)) = min \\AD{u){BD{u))*\\tr , 

V X u:\\u\\ = l 

where A = \ax){x\ and B = \hx){x\. Since p = A* A, a = B*B and po uu* = D{u)*pD{u), 
the claim follows using 

||A:y*||tr = \\{x*x)^/\Y*Yy/^\\tr 

and the definition of the fidelity T{X*X, Y*Y) = || (X*X)i/2(y*y)i/2||^^_ □ 
The following quantities then give lower bounds for e-error coherent quantum state generation: 
Definition 3.9 (Additive and multiplicative bounds). 

Adv^{a) = minAdv*(p) 

p 

Madve((T) = minMadv(p), 
p 

where both minimizations are over Gram matrices p such that 

min T{p o uu* , a o uu* ) > \/l — £• 

u:||u|| = l 

In light of Claim 3.8, we can slightly improve one of the bounds in [LMR"^11, Lemma 4.8], 
which compares the tight output condition based on the fidelity to the output condition based on 
the factorization norm 72. 



10 



Claim 3.10. Let {{o-x)} , {\bx)} be two sets of vectors, and p,a their corresponding Gram matri- 
ces. Say that \/l — e = maxy mmx?li{{ax\V\bx)), where the maximization is taken over all unitary 
matrices V. Then ^ 

1 - VI - e < -72(p -a) <^/e, 

Proof. This directly follows from Claim 3.8 and the relation between the trace distance and fidelity. 



1 — J^{p o uu* , a o uu*) < -\\ip — cr) o uu*\\tr < y^l — J-'{p o uu*,a o uu*Y ■ 

□ 

Note that an adversary matrix F yields a good zero-error multiplicative adversary bound if 
Tr(T{aovv*)) is large. To obtain a bound for e-error algorithms, we need to show that Tr(T{povv*)) 
remains large for any Gram matrix p such that J-{p o uu* ,a o uu*) > \/l — e for all unit vectors u. 
The following lemma will be useful. 

Lemma 3.11. Letp,q be two distributions for a discrete random variable A taking values in R^. 
IfJ^{p,q) > y/S, then 

E,{A)>6[E,iA-')]-\ 

Proof. Let pi = PTp[A = Oi] and Qi = PiCq[A = Oj]. We need to lower bound the value of the 
following optimization program: 

minimize QiUi subject to J^(p, q) > Vd. 

Introducing vectors \u) = y^K) and \v) = y^l^), and letting D{A) be a diagonal matrix 
with the support of A along the diagonal, this can be rewritten as 

minimize {v\D{A)\v) subject to \{u\v)f > 6 

\v):\\v\\ = l 

= minimize Tr[L'(^)/9] subject to Tr[|n)('u|/3] > 6. 

pyO:Trp=l 

This is a semidefinite program, whose dual can be written as 

maximize X6 + p subject to D{A) >z X\u){u\ + pi. 

X>0,fj, 

Setting p = 0, this is at least 

5 maximize A subject to D{A) ^ AluX^I. 

Let \w) = \/Pi/(ii\i)- The constraint is equivalent to / ^ X\w){w\, which in turn is equivalent 
to A|||u;)(^i;||| = A||it;||^ < 1. The lemma then follows from = YliPi^i^- ^ 

To apply this lemma, we need an upper bound on Ep[A^^]. In our applications, we usually do 
not know explicitly the distribution p, but we do know its expectation and the extremal values in 
its support. The next claim allows us to upper bound Ep[A~^] in terms of these quantities. 
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Claim 3.12. Let < oq < a < ai, and A he a random variable taking values in S CI [ao,ai]. // 
Ep{A) = a, thenE,{A-^)<'i^^±^. 

Proof. Ep{A~^) is at most the value of the following linear program: 

maximize /^PaO^^ subject to /^PaO = a, Pa = 1- 

The dual program can be written as 

minimize A — a/x subject to /ia^ — Xa + 1 < \/a £ S. 

Since ao < a < ai, the constraint is satisfied for A = ""^"^ and /x = which leads to Ep{A^^) < 

ao+ai—a |— | 
aoai 

Putting the last two claims together, we get the following corollary which is key to our strong 
direct product theorem. 

Corollary 3.13. Let oi > ao > and p be a distribution for a random variable A taking values in 
[ao,ai]. Lf Ep[A] = a and q is a distribution over (Rq')'^ such that F{p®^,q) > VS^, then 



E,{U^^,Ai) > 



5aQai 



Oq + ffli — a 



3.4 Comparison of the adversary bounds 

Let us first prove a variation of the result by [AMRRl 1] that the multiplicative adversary bound is 
stronger than the additive bound. The main difference with [AMRRll] is that this claim relies on 
the bound Adv*{a) which is potentially stronger for general quantum state generation problems. 

Claim 3.14 ([AMRRll]). For any e > and any state generation problem a, we have 

Madv(cj) > (l-e)Adv*(cj). 

Proof. Let T be an optimal witness for Adv*(o") = b, and v be the principal eigenvector of ro(J — cr). 
Note that we may assume without loss of generality that v corresponds to a positive eigenvalue of 
To (J — cr). Let L' = F — Tr((r o a)vv*)L, and notice that F' is also a witness for Adv* (cr) = b, 
satisfying Ti(T'vv*) = b and Tr((r' o a)vv*) = 0. Let d = \\T'\\ and note that d>b. Finally, define 
Lm = (-f + 7(d/ — F'))/(l + 7(d — 6)). Therefore, we have Tr(F 
(l+7(i)/(l + 7(d-&))- 

We now show that the condition c ""^F^ ^ F^ o Aj ^ cF^ is satisfied for c = 1 + 7. We show 
(1 + 7(d - b)){Tm o {cAi - J)) ^ which implies F„ o (cAj - J) ^ as 1 + 7(d - 6) > 0. 

(1 + 7(d - 6))(r™ o (cA, - J)) = ((1 + 7d)/ - 7F') o ((A, - J) + 7A,) 

= 7(1 + F' o ( J - Ai)) + j\dL - r') o A,. 

Prom the constraint of the additive metric we know that / + F' o ( J — Aj) ^ for all i £ [n]. Also 
as d/ — F' ^ , taking the Hadamard product with Aj ^ gives {dL — F') o Aj ^ 0, by Property 2 
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in Claim 2.4. Therefore, we have o (cAj — J) ^ 0. One can show o (cJ — Aj) ^ in a similar 
fashion. This implies that T^ is a witness for 



In 



Madv(a)> ^'^^^'-'^^ 



ln(l+7) 



The right hand side tends to 6 = Adv*(cj) in the limit 7 — )■ 1, therefore, by continuity, for any e > 
there exists 7 such that Madv(cr) > (1 — e)Adv*(c7). □ 

Adapting results from [Spa08, AMRRll], this implies a strong direct product theorem for 
Madv(cr) as long as the bound is obtained for c = 1 + 0(l/Adv*(o")). Unfortunately, showing that 
we can take c bounded away from 1 requires bounding d = \\T'\\, which we do not know how to do 
for a general state generation problem a. In general, we can only use this statement in the limit 
c — )• 1, in which case the direct product theorem degrades into a direct sum theorem. This is why 
[AMRRll] were not able to conclude a strong direct product theorem. 

We observe that for interesting cases such as F or a f, we can bound the norm of the witness 
r' using the following claim. 

Claim 3.15. Suppose that (J — a) o (J — a) = A(J — a). Then there is a matrix V witnessing 
^ Adv^H ||p,|| ^ Adv^ Y'o(J-a) = XT'. 

721.^ — 0" I " " — 'VolJ— (Tl 



Proof. Let P be an optimal witness for Adv*(cT). Define V = 72(J — c) ^(T o (J — a)). By 
assumption, we then have V o [J — a) = XT' . This is a feasible witness as 

||r' o (J - A,)|| < ^^T^lir ° - ^011 < 1 

72 (J - a) 

by Property 1 in Claim 2.4. Furthermore, ||F'|| = 72( J — o")^^Adv*(cj) and F' witnesses a bound of 
A||F'|| = A72(J - cj)~^Mw*{a). □ 

For certain state generation problems including F and aj we are thus able to obtain a quanti- 
tative version of Claim 3.14. 

Claim 3.16. Suppose that {J — a) o {J — a) = A(J — a), and let d = j2{J — o-)^-'^Adv*(cj). Then, 
for any 7 > 0, there is a multiplicative witness Tm and a vector v such that 

TriT^vv*) = 1 
Tr(Fm(o" o vv*)) = 1 + A7ci 

/ ^ F^ ^ (1 + 27d)/, 
c~^Tm ^ Fm o Aj ^ c Fm for all i, 

where 0=1+7. Therefore Tm satisfies the constraints of Definition 3.5 and witnesses that 

ln(l + X-fd) 



Madv(cj) > 



ln(l + 7) 
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Proof. From Claim 3.15, there exists a witness F witnessing Adv*{a) > Xd such that ||F|| = d. Let 
V be the principal eigenvector of F, and F^, = I + ^{dl — F). Note that we may assume without 
loss of generality that v corresponds to a positive eigenvalue of F. Therefore, we have F^ ^ I and 
Tr(F mW*") — 1. As F o ( — fj) — AF, it follows that v is also a principal eigenvector of F o ( J — cr), 
and the objective value achieved by F is Tr(F(( J — a)o vv*)) = Xd. Thus Tr(F((T o vv*)) = (1 — X)d 
and Tr(Fm(<7 o vv*)) = 1 + X'^d. The third condition follows from —dl ^ F ^ dl. 

The fact that the condition c~^Tm ^ F^ o Aj ^ cF^ is satisfied for c = 1 + 7 follows by the 
same argument as in the proof of Claim 3.14. □ 

Taking 7 = l/{dX) gives the following corollary. 

Corollary 3.17. Suppose that [J — a) o [J — a) = X{J — a). Then, 

, , ^ ^ X Adv*(cr) 
Madv((T) > A 

Note that in this statement Madv(cr) is proved with c = 1 + 1/(A • Adv*(cj)), which is what we 
need for the strong direct product theorem. 

Now we have shown that the multiplicative bound is a constant fraction of the additive bound 
in the exact case. Thus the same will be true with respect to any output condition. 



4 Strong direct product theorem 

We first prove the following theorem, which will lead to both the strong direct product theorem 
and the XOR lemma in the boolean case. 

Theorem 4.1. Let a be a Gram matrix for a state generation problem satisfying [J — a)o{J — a) = 
A(J — a) for some A > 0, and let d = 72(J — o")~^Adv*(o"). Then for any 7 > 



21n(l + 7) 

Proof. Let v,Tm satisfy the conditions in Claim 3.16. As a witness for a®^ we take F®'^. Let us 
first see that this matrix satisfies the multiplicative constraint with the same value c = 1 + 7. 

We label the constraint matrices Ap^g for a®^ by p G \k] and g G [n]. These are |P|'^-by-|P|'^ 
matrices where Ap_q((x\ . . . ,x^),{y^ , . . . ,y^)) = S^p^yP. In other words, = J®p~'^ ® \® J®^~p . 

Thus T®'' o Ap^q = F®^"^ (g)Tm oAq(g) T^^~^. Since c'^F^ ^ F„ o Ag ^ c F„ for all p e [n], and 
obviously c~^Tm ^ F^ ^ c F^, for c > 1, we immediately have 

^ ^ m — ^ m '-^P,q — m 

for any p £ [k],q £ [n]. 

To lower bound the objective value we lower bound 

Madvi_5fe(cj®'^) > mmTr{T^''{po{vv*)®'')), 
p 

where the minimum is over psd matrices p such that po I = I and 

min F[p o uu* ,a®^ ouu*) > 5^^"^ . 
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In particular, this will hold for u = and we can apply Corollary 3.13 with p being the distribution 
arising from measuring Tm on cr o vv* , and q the distribution arising from measuring F®*^ on 
po(tit)*)®^. Since T{po{vv*)^'^ , (aovv*)^'') > 8^1'^ , we also have T{j)®^ ,q) > 5^/"^. The parameters 
in Corollary 3.13 are oq = 1, oi = 1 + and a = 1 + X'^d thus 



Ti{T'^{po{vv*)®^)) > 5^ 

and in turn 



l + 27d 



1 + 7d(2 - A) 



□ 

We then obtain the following strong direct product theorem for the quantum query complexity 
of any function (boolean or not). 

Theorem 4.2. For any function f , any (2/3) < S < 1 and any integer k > 0, we have 

Q,_,./.(/'=))>^^^^Adv*(F). 

Proof. Notice that (J — F) o (^J — F) = J — F and 72 (J — F) < 2. Thus applying Theorem 4.1 with 
A = 1 and 7 = l/d, we obtain 

This lower bound is for computing f^'^^ coherently, and we obtain the lower bound for /^^^ using 
Claim 2.5. □ 



5 Boolean functions 
5.1 XOR Lemma 

We now focus on boolean functions. Before proving the XOR lemma, we prove a strong direct 
product theorem for the problem of computing a function in the phase. 

Let CTf = 2F — J he the Gram matrix corresponding to computing a boolean function / in the 
phase. 

Claim 5.1. Let d = Adv*(F). For any 5, 7, 

kln{6{l + 2jd)) 



21n(l + 7) 



Proof. Notice that J - af = 2{J - F), therefore (J - af) o ( J - a/) = 2(J - af), 72(J - o"/) = 2 
and Adv*((T/) = 2Adv*(F). The claim then follows from Theorem 4.1 with A = 2. □ 

Setting 7 = l/{5d), we immediately obtain the strong direct product theorem for af. 
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Corollary 5.2. For any 5, 



k5 



QU^{af)>-kdY*{F) 



Let ©o/(^) be the function computing the parity of k independent copies of /. Since computing 
© o /C^) in the phase is the same as generating the state cr®^ ^ we obtain the XOR lemma from the 
strong direct product theorem for and Claim 2.6. 

Corollary 5.3 (XOR Lemma). For any boolean function f , any < d < 1 and any integer k > 0, 



5.2 Threshold and strong direct product theorems 

Finally, we prove a threshold direct product theorem. This will follow from Claim 5.1 together with 
the following threshold lemma [Ung09, Lemma 2]. 

Lemma 5.4 ([Ung09]). Let Yi, . . . ,1^ G {— 1,+1} be random variables, — 1 < /3 < 1 and C > be 
such that 



k6 



E 



for all 5 C [k]. Let A be such that /3 < A < 1. Then 



Pr 



^Yi>Xk 



1=1 



< (-.g-fcD(l/2+A/2||l/2+/3/2)_ 



Theorem 5.5. For any function f , any < 5 < 1, any jjL such that ^-y^ < < 1 and any integers 
k,K > 0, let Vi{xi, . . . ,Xk) G {—1, 1} be the i-th output of a T-query algorithm for f^^\ where 



T < 



kS 



-Adv*(F), 



K{l-6) 

and let X = {i £ [k] : Vi{xi, . . . ,Xk) = f{xi)}. Then, 

Pt[\X\ > fik] < e^"''^(^ll^ 

Proof. Let d = Adv*{F) and, for any i £ [k] and any set S C [k], let us consider the random 
variables ¥{ = Vi{xi, . . . , Xk) • f{xi) G { — 1, 1} and the expectations j3s = -^'dlies ^«)- definition, 
we have 

Q(l-/3s)/2(®°/^""^)<^- 

Moreover, we also have from Claims 2.6 and 5.1: 

n (^om)\>^n^ ln(/3|(l + 27^)1^1) 
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for any 7 > 0, which together with the previous inequahty leads to 

For 7 = (1 - 5)/{26d), this imphes Ps < e^l^b^^^l"^. Using Lemma 5.4 with /3 = \fb, C = e^/^ and 
A = 2/x — 1, we then obtain 



Pr 



The theorem then fohows from |-'^| = (fc + X]i=i-^)/2- D 

In the special case // = 1, we obtain the following strong direct product theorem for boolean 
functions. 



Corollary 5.6. For any function f, any < 5 < I and any integers k,K > 0, 

k6 
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